Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: Lrp3b4rJ5rKU389Y1spTiaooiyzYzvD2EiuWM6rqU6s=
Subject key identifier: 51:94:D6:ED:97:DF:0F:3F:AA:B1:10:0A:35:0E:B6:43:45:3A:D8:6D
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 019D273B344BEAAA320FF403C146BA35FE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 08C8
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: PQ4kixVMpunmZd3Y9lneEnubVHU.roa (hash: Yf8PqpssV4aPe31IuLnMjahZv8QaQaygjHQtEb4Jhyc=)
2: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (hash: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o=)
3: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: qMXKdWO+LRRx+LFp5U7d+aMZhzimQpJ2aKYcKRrTWwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:34:4b:ea:aa:32:0f:f4:03:c1:46:ba:35:fe:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=5194d6ed97df0f3faab1100a350eb643453ad86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:58:7c:10:5b:e1:d4:e8:79:bf:ec:16:a4:
aa:8b:5d:47:31:f6:d2:ed:79:00:a3:23:ee:64:ca:
ed:22:0b:1a:3f:55:12:dc:1a:e5:35:b6:6e:78:af:
f6:e6:28:46:92:63:a9:d9:5d:21:af:35:76:22:42:
b5:d3:17:90:55:0b:79:8a:ab:b9:fc:aa:61:d3:14:
a2:fa:e2:9a:1f:8a:cb:c4:07:1c:92:59:f8:0f:00:
de:dc:d6:d5:6d:fa:74:de:fb:ec:bb:71:17:f0:be:
27:05:7e:e9:8d:45:f1:8d:25:ee:3f:f6:68:42:ac:
5d:89:c2:4b:f2:15:90:68:c3:1f:21:f0:c4:f4:e6:
36:66:57:d8:ce:52:56:d6:a6:14:83:2b:5b:6d:45:
e2:5f:21:ce:80:93:e1:65:cf:e8:0c:59:16:1c:01:
e0:18:d3:a1:bc:55:41:fe:72:38:36:e7:d2:42:40:
71:35:0d:13:bd:73:d8:d2:58:db:5d:21:cb:db:bd:
8e:b7:07:96:ed:db:69:7a:91:e0:dd:8b:19:3a:5e:
2d:4c:cd:7c:88:93:42:6b:eb:15:ea:7a:dd:c8:c6:
f3:b4:25:49:f8:47:25:ee:45:48:50:cc:4f:6a:0b:
c1:cd:4d:a5:90:d9:33:ec:55:4a:2b:c0:27:82:14:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:D6:ED:97:DF:0F:3F:AA:B1:10:0A:35:0E:B6:43:45:3A:D8:6D
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:47:e8:2d:34:f8:ec:81:49:d7:34:6e:ff:9b:3e:29:fe:ed:
1d:bc:4e:ed:f7:04:a1:37:46:48:34:1a:92:6f:59:98:fe:46:
16:61:31:ce:88:cf:97:cc:20:2b:17:13:3a:66:92:5f:09:85:
5f:12:4f:85:29:1f:22:b6:8d:c7:55:c6:ab:e8:c7:83:33:5d:
e5:07:e6:a0:55:7f:76:88:60:98:fd:30:fc:8c:b2:2e:9e:2d:
4d:6f:6b:07:ca:5d:49:54:3a:f8:ba:74:e1:89:ce:a9:5d:d2:
83:7f:61:c5:18:43:bb:44:d4:74:97:1d:1a:8f:6e:d1:b9:80:
d8:39:08:eb:3d:29:68:e8:b4:a2:1c:3c:29:a2:fb:27:c9:aa:
1d:0a:ec:b8:4a:a6:6c:8b:f7:dd:31:3b:2b:11:d9:53:8b:72:
06:21:4c:dd:32:3e:92:b8:09:80:37:8c:5c:45:91:e3:d4:42:
ac:cb:4e:cf:a5:f6:7a:77:2f:84:24:25:5e:fd:26:90:eb:26:
4c:14:69:c0:e0:a6:c1:01:c5:21:27:0b:d0:4d:26:dc:60:be:
f2:f5:d1:0b:7a:bd:d6:31:0a:d3:89:b4:c3:9d:9f:e1:48:99:
c4:20:b7:da:a7:60:40:59:e8:a8:ad:f3:58:d2:d9:3f:ae:67:
7c:7b:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:52 2026 by rpki-client